Identity and access
Administrator roles and how many exist, MFA enforcement state, legacy authentication protocols still enabled, dormant and orphaned accounts, and password policy.
Services
Cloud Security Configuration
Cloud security configuration is the review and hardening of the settings that govern identity, sharing, and administration inside platforms like Google Workspace, Microsoft 365, Dropbox, and Azure. Most cloud breaches in small businesses come from a misconfigured setting, not from a sophisticated exploit.
Scope
What the configuration review covers
Third-party app access
OAuth applications connected to your tenant, what scopes they hold, and which ones nobody remembers approving.
External sharing
Default sharing scope for files and drives, links set to anyone-with-the-link, external collaborators with standing access, and shared mailboxes.
Email security
SPF, DKIM, and DMARC records, forwarding rules that send mail outside the organization, and inbox rules created by an attacker after a compromise.
Audit and logging
Whether audit logs are turned on, how long they are retained, and whether anyone would see an alert if an account were taken over tonight.
Device and endpoint posture
Which devices can reach company data, whether unmanaged personal devices are included, and what happens when someone leaves.
Process
How the engagement runs
STEP 01
Read-only access
We start with a read-only administrative view under NDA. Nothing is changed during the assessment phase.
STEP 02
Configuration baseline
Current settings are compared against platform hardening guidance and the controls that map to NIST CSF and ISO 27001.
STEP 03
Prioritized findings
Each finding is ranked by business risk, not by severity score alone, with the exact setting and the exact remediation written out.
STEP 04
Remediation
We apply the changes with you, in a sequence that does not break how your team actually works, or hand the runbook to your IT provider.
STEP 05
Re-check
Settings are verified after the change, and the configuration baseline is documented so drift is visible later.
Fit
Signals you need this review
- Nobody can say for certain how many administrator accounts exist.
- A contractor or former employee may still have access to shared files.
- MFA is enabled for some people but never enforced tenant-wide.
- Files are shared with anyone-with-the-link because it was faster at the time.
- You moved to the cloud quickly and the settings were never revisited.
FAQ
What is cloud security configuration?
Cloud security configuration is the process of reviewing and hardening the identity, sharing, administration, and logging settings inside cloud platforms such as Google Workspace, Microsoft 365, Dropbox, and Azure. The goal is to close the gaps that come from default or rushed settings rather than from software vulnerabilities.
Which cloud platforms does PikeShield review?
PikeShield reviews Google Workspace, Microsoft 365, Dropbox, and Azure environments, covering cloud identity, storage, sharing, audit, and administrator settings against best practices.
Will the review disrupt our environment?
No. The assessment phase is read-only and performed under NDA. Changes are only applied afterwards, agreed in advance and sequenced so daily work is not interrupted.
How is this different from the security features already built into our cloud platform?
The features are there, but they ship with defaults chosen for convenience. The work is deciding which ones apply to your organization, turning them on in the right order, and confirming they stay on.
How does PikeShield pricing work?
PikeShield scopes each engagement to your environment, team size, and risk profile, so pricing is tailored rather than one-size-fits-all. The first step is a free security assessment, after which PikeShield outlines priorities and recommended next steps.
How do I get started?
Request a free security assessment through the contact form, email daniel@pikeshield.com, or call +1 (768) 300-2261. PikeShield will follow up to discuss your risk profile and next steps.